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[Name of Dob&jgMESS>^ SPECIFICATION 

[Title of the Invention] VEHICULAR CONTROL DEVICE HAVING 
SELF-DIAGNOSIS FUNCTION AND RECORDING MEDIUM 
[Claims ] 
5 [Claim 1] 

A vehicular control device having a self-diagnosis 
function for informing occurrence of abnormality in a diagnosis 
target by controlling a malfunction indicator light (MIL) based 
on a result of a malfunction detection operation of the diagnosis 
10 target, the vehicular control device being characterized in that 

a self-diagnosis program, which implements the self-diagnosis 
function, has an object oriented design and is constructed of a 
plurality of reusable objects, wherein the self-diagnosis 
program includes : 

15 a malfunction-information storing object that can specify 

a control instruction for instructing a control operation of the 
MIL for malfunction information of the diagnosis target based on 
the malfunction information, wherein the malfunction information 
is determined based on the result of the malfunction detection 

2 0 operation of the diagnosis target in view of a level of 

malfunction of the diagnosis target; and 

a malfunction-information managing object that carries out 
adjustment based on the control instruction for instructing the 
control operation of the MIL specified by the 

2 5 malfunction-information storing object for the malfunction 

information and then outputs MIL information for controlling the 
MIL. 
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[Claim 2] 

A vehicular control device having a self -diagnosis 
function for informing occurrence of abnormality in a diagnosis 
target by controlling a malfunction indicator light (MIL) based 
on a result of a malfunction detection operation of the diagnosis 
target, the vehicular control device being characterized in that 
a self-diagnosis program, which implements the self-diagnosis 
function, has an object oriented design and is constructed of a 
plurality of reusable objects, wherein the self-diagnosis 
program includes : 

a malfunction-information storing object that stores 
malfunction information of the diagnosis target, which is 
determined based on the result of the malfunction detection 
operation of the diagnosis target in view of a level of 
malfunction of the diagnosis target; and 

a malfunction-information managing object that commands 
the malfunction-information storing object to store the 
malfunction information based on the result of the malfunction 
detection operation of the diagnosis target, wherein: 

the malfunction-information storing object can specify a 
control instruction for instructing a control operation of the 
MIL for the malfunction information based on the malfunction 
information; and 

the malfunction-information managing object carries out 
adjustment based on the control instruction for instructing the 
control operation of the MIL specified by the 
malfunction-information storing object for the malfunction 



information and then outputs MIL information for controlling the 
MIL. 

[Claim 3] 

The vehicular control device having the self -diagnosis 
function according to claim 1 or 2 , characterized in that the 
malfunction-information storing object is prepared for the 
diagnosis target or is prepared for a malfunction check item that 
corresponds to the diagnosis target. 
[Claim 4] 

The vehicular control device having the self-diagnosis 
function according to any one of claims 1 to 3, characterized in 
that : 

the malfunction-information storing object stores 
relationship information indicative of relationship between the 
malfunction information and the control instruction; and 

the malfunction-information storing object specifies the 
control instruction for instructing the control operation based 
on the relationship information. 
[Claim 5] 

The vehicular control device having the self-diagnosis 
function according to any one of claims 1 to 4, characterized in 
that the malfunction-information storing object specifies the 
control instruction for instructing the control operation based 
on the malfunction information when a request for retrieving the 
control instruction for instructing the control operation is 
received from the malfunction-information managing object. 
[Claim 6] 



The vehicular control device having the self -diagnosis 
function according to any one of claims 1 to 5, characterized in 
that the malfunction-information managing object outputs the 
control instruction for instructing the control operation, which 
5 have the highest priority, as the MIL information based on a 

priority level that is previously determined for the control 
instruction for instructing the control operation. 
[Claim 7] 

A vehicular control device having a self -diagnosis 
10 function for informing occurrence of abnormality in a diagnosis 

target by controlling a malfunction indicator light (MIL) based 
on a result of a malfunction detection operation of the diagnosis 
target, the vehicular control device being characterized in that 
a self-diagnosis program, which implements the self-diagnosis 
15 function, has an object oriented design and is constructed of a 

plurality of reusable objects, wherein the self -diagnosis 
program includes : 

a malfunction-information managing object that outputs MIL 
information for controlling the MIL when a request for 
2 0 controlling the MIL is received, wherein the request for 

controlling the MIL is different from a request for executing the 
malfunction detection operation of the diagnosis target. 
[Claim 8] 

A vehicular control device having a self-diagnosis 
25 function for informing occurrence of abnormality in a diagnosis 

target by controlling a malfunction indicator light (MIL) based 
on a result of a malfunction detection operation of the diagnosis 
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target, the vehicular control device being characterized in that 
a self-diagnosis program, which implements the self-diagnosis 
function, has an object oriented design and is constructed of a 
plurality of reusable objects, wherein the self-diagnosis 
5 program includes : 

a malfunction-information storing object that stores 
malfunction information, which is determined based on the result 
of the malfunction detection operation of the diagnosis target 
in view of a level of malfunction of the diagnosis target; and 

10 a malfunction-information managing object that commands 

the malfunction-information storing object to store the 
malfunction information based on the result of the malfunction 
detection operation of the diagnosis target, wherein: 

the malfunction-information managing object outputs the 

15 MIL information for controlling the MIL based on the malfunction 

information stored by the malfunction-information storing object 
when a request for controlling the MIL is received, wherein the 
request for controlling the MIL is different from a request for 
executing the malfunction detection operation of the diagnosis 

20 target. 

[Claim 9] 

The vehicular control device having the self-diagnosis 
function according to any one of claims 1 to 6, characterized in 
that the malfunction-information managing object outputs the MIL 
25 information when a request for controlling the MIL is received, 

wherein the request for controlling the MIL is different from a 
request for executing the malfunction detection operation of the 
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diagnosis target. 
[Claim 10] 

A vehicular control device having a self-diagnosis 
function for informing occurrence of abnormality in a diagnosis 
5 target by controlling a malfunction indicator light (MIL) based 

on a result of a malfunction detection operation of the diagnosis 
target, the vehicular control device being characterized in that 
a self-diagnosis program, which implements the self-diagnosis 
function, has an object oriented design and is constructed of a 
10 plurality of reusable objects, wherein the self -diagnosis 

program includes : 

a malfunction-information managing object that outputs MIL 
information for controlling the MIL; and 

an MIL controlling object that controls the MIL based on 
15 the MIL information outputted from the malfunction-information 

managing object. 
[Claim 11] 

A vehicular control device having a self-diagnosis 
function for informing occurrence of abnormality in a diagnosis 

20 target by controlling a malfunction indicator light (MIL) based 

on a result of a malfunction detection operation of the diagnosis 
target, the vehicular control device being characterized in that 
a self-diagnosis program, which implements the self-diagnosis 
function, has an object oriented design and is constructed of a 

25 plurality of reusable objects, wherein the self-diagnosis 

program includes : 

a malfunction-information storing object that stores 
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malfunction information, which is determined based on the result 
of the malfunction detection operation of the diagnosis target 
in view of a level of malfunction of the diagnosis target; 

a malfunction-information managing object that commands 
the malfunction-information storing object to store the 
malfunction information based on the result of the malfunction 
detection operation of the diagnosis target, wherein the 
malfunction-information managing object outputs MIL information 
for controlling the MIL based on the malfunction information 
stored by the malfunction-information storing object; and 

an MIL controlling object that controls the MIL based on 
the MIL information outputted from the malfunction-information 
managing object. 
[Claim 12] 

The vehicular control device having the self-diagnosis 
function according to any one of claims 1 to 9, characterized in 
that the object oriented self-diagnosis program further includes 
an MIL controlling object that controls the MIL based on the MIL 
information outputted from the malfunction-information managing 
object. 
[Claim 13] 

A computer readable recording medium, which stores the 
self-diagnosis program of the vehicular control device according 
to any one of claims 1 to 12. 
[Description of the Invention] 
[Field of Industrial Application] 

The present invention relates to a self-diagnosis function 



of a vehicular control device that controls a vehicle and also 
relates to a technique for implementing the self-diagnosis 
function through an object-oriented program. 
[Prior Art] 

5 Recently, the mechatronics technology, which combines the 

mechanics technology with the electronics technology, has shown 
the notable progress as a result of the substantial progress in 
the electronics technology, such as the advent of high 
performance microprocessors. As a part of the progress in the 

10 mechatronics technology, various computer systems have been 

developed for use in vehicles, such as automobiles. These 
vehicular computer systems are used to achieve an improvement in 
resource consumption, energy consumption, running performance, 
safety, comfort or the like and are provided in various systems, 

15 such as an engine system, a drive system, a running/safety system, 

an entertainment system and the like of the vehicle. 

Among the various computer systems, a vehicle controlling 
computer system has been particularly demanded to achieve high 
reliability. For example, if the vehicle controlling computer 

2 0 system is not able to detect a malfunction of a particular 

component of the system, the vehicle may experience a driving 
trouble or may not be able to continue its driving. To avoid this, 
one previously proposed computer system has a self-diagnosis 
function to improve its reliability. Specifically, a diagnosis 

25 process is implemented to achieve the self-diagnosis function. 

In the diagnosis process, operations of a computer unit, various 
sensors and the like are automatically and periodically checked. 
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Then, if any malfunction is detected, a malfunction indicator 
light (MIL) is lighted or flashed to notify a user of the 
malfunction, and a malfunction code (DTC) is stored in a memory 
to notify a service person of a damaged component corresponding 
to the malfunction code. Targets of the diagnosis process include 
a crank angle sensor, a cam angle sensor, a water temperature 
sensor and the like. The number of the targets of the diagnosis 
process reaches about 200 or more. Hereinafter, the targets of 
the diagnosis process will be simply referred to as "the diagnosis 
targets" . 

The present invention relates to an MIL control operation 
for controlling the MIL in the diagnosis process . The malfunction 
notification through the MIL provides the user with systematic 
malfunction information of about 2 00 or more diagnosis targets 
through several MILs . Thus, in the MIL control operation, it is 
essential to provide logic for systematically interpreting and 
judging malfunction information transmitted from each one of the 
diagnosis targets . 

One previously proposed technique for implementing such a 
diagnosis process is disclosed, for example, in Japanese 
Unexamined Patent Publication No. 7-190897 . In this publication, 
there is disclosed a program architecture including an MIL 
controller module that illuminates the MIL when a predetermined 
number of malfunctions are detected. 
[Problems to be solved by the Invention] 

The MIL controller module disclosed in the above 
publication illuminates the MIL when the predetermined number of 



malfunctions are detected. Furthermore, (I) malfunction 
judgment of the diagnosis target, (II) adjustment of the result 
of each malfunction judgment and (III) an MIL control operation 
that is carried out based on a result of the adjustment are 
conducted by the single MIL controller module. Thus, when 
specification change, such as change of a diagnosis target, takes 
place, a relatively large amount of time is required to modify 
the MIL controller module. This will be further described in the 
following (l)-(3). 

(1) The malfunction judgment (I) of the diagnosis target 
cannot be a simple process of checking an operational state of 
the diagnosis target from time to time to judge or determine 
whether the diagnosis target is malfunctioning. This is due to 
the fact that each malfunction has a particular level. For 
example, in a case of "a malfunction" of an input-signal line 
connected to a sensor, a temporal loose connection of, for example, 
a connector is called "the malfunction", and complete 
disconnection of the signal line is also called "the malfunction". 
In the former case, the connector could resume its normal function 
later on and thereby may not be required to be replaced. Thus, 
in light of the above fact, in one previously proposed technique, 
the temporal malfunction, such as the loose connection of the 
connector, is referred to as "temporarily abnormal", and the 
permanent malfunction, such as the complete disconnection of the 
signal line, is referred to as "abnormal". The malfunction 
information that indicates such a level of malfunction is stored 
in a memory. Then, the MIL control operation is carried out based 



on such malfunction information, so that flashing, lighting-on 
or lighting-off of the MIL is generally conducted based on the 
level of the malfunction. 

Furthermore, even if the malfunction information is the 
5 same, that is, the level of the malfunction is the same, the MIL 

control operation may vary from one diagnosis target to another 
diagnosis target. That is, for example, if the diagnosis target 
is the important one and is determined to be temporarily abnormal, 
the MIL should be lighted on or flashed immediately. On the other 

10 hand, if the diagnosis target is not the important one and is 

determined to be temporarily abnormal, the MIL may not be lighted 
on or flashed immediately until the diagnosis target becomes 
completely abnormal . 

Thus, even if the malfunction information is determined in 

15 view of the malfunction level of the diagnosis target, the control 

operation of the MIL varies depending on the type of the diagnosis 
object. Thus, the logic for executing the adjustment (II) of the 
result of each malfunction judgment may be complicated. 

Particularly, the previously proposed MIL controller 

2 0 module is constructed to carry out the series of the processes 

(I)-(III) as one process. Thus, when anyone of the diagnosis 
targets is changed, the logic for executing the malfunction 
judgment (I) of the diagnosis target and the logic for executing 
the adjustment (II) of the result of the malfunction judgment need 

25 to be changed, so that a relatively large amount of time may be 

required to change the MIL controller module. 

(2) The MIL controller module disclosed in the above 
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publication is operated upon receiving a command from a scheduler. 
That is, the series of the processes (I)- (III) are carried out 
upon receiving the command from the scheduler. 

At this stage, a timing for executing the malfunction 
5 judgment (I) of the diagnosis target varies depending on the 

diagnosis target. For example, a malfunction of one diagnosis 
target may be judged at predetermined time intervals, e.g., at 
every 4 ms, 8 ms or 16 ms. A malfunction of another diagnosis 
target may be judged at predetermined crank angles (CA), e.g., 

10 at every 30 CA, 60 CA or 180 CA. Furthermore, a timing for 

executing the MIL control operation (III) does not coincide with 
the timing for executing the malfunction judgment (I) of the 
diagnosis target. 

Since the series of the processes (I) -(III) are conducted 

15 sequentially as one process in the previously proposed MIL 

controller module, the timing for executing the MIL control 
operation (III) needs to be adjusted in view of the timing for 
executing the malfunction judgment (I) of the diagnosis target. 
If any diagnosis target needs to be changed, this will constitutes 

20 a factor that lengthens the time required for changing the MIL 

controller module. 

(3) Furthermore, the logic for executing the MIL control 
operation (III) is constructed to control the MIL based on a 
result of the adjustment and to provide a final control 

25 instruction for instructing a control operation of the MIL, such 

as flashing, light ing-on or lighting off, based on vehicle 
information. Thus, the logic for executing the MIL control 
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operation (III) is generally not dependent on the type of 
diagnosis target and is generally not required to be changed when 
the diagnosis target is changed. On the other hand, when the 
vehicle information is changed, it could happen that only the 
5 logic for executing the MIL control operation (III) is required 

to be changed. 

However, since the MIL controller module disclosed in the 
above publication is modularized to conduct the series of the 
processes (I) -(III) as the one process, so that reusability of 
10 the MIL controller module is relatively low. 

The applicant of the present application has already 
disclosed a reusable program structure for executing the 
malfunction judgment (I) of the diagnosis target in Japanese 
Patent Application No. 2000-130180. Thus, this application is 
15 particularly focused on modularization of logic for executing the 

adjustment (II) of the result of each malfunction judgment and 
logic for executing the MIL control operation (III) conducted 
based on the result of the adjustment. 

That is, the present invention addresses the disadvantages 
20 discussed in the above sections (l)-(3), and it is an objective 

of the present invention to improve reusability of a 
self-diagnosis program that implements an MIL control operation 
in a case of specification change, such as change of a diagnosis 
target. 

25 [Means for Solving the Problems and Advantages of the Invention] 

To achieve the above objective, a self-diagnosis program 
for implementing a self-diagnosis function of a vehicular control 
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device according to claim 1 has an object-oriented design and is 
constructed of a plurality of reusable objects. 

In the present invention, the plurality of objects include 
a malfunction-information storing object and a 
malfunction-information managing object. 

The malfunction-information storing object can specify a 
control instruction for instructing a control operation with 
respect to malfunction information of the diagnosis target based 
on the malfunction information of the diagnosis target. The 
malfunction information of the diagnosis target is determined 
based on a result of a malfunction detection operation of the 
diagnosis target. For example, the malfunction information can 
be "normal", "temporarily abnormal" or "abnormal" that is 
determined in view of a level of the malfunction. For example, 
the control operation can be "flashing", "lighting-on" or 
"lighting-of f " . 

The malfunction-information managing object carries out 
adjustment based on the control instruction for instructing the 
control operation of the MIL specified by the 
malfunction-information storing object for the malfunction 
information and then outputs MIL information for controlling the 
MIL. 

That is, the present invention is focused on the fact that 
the logic for specifying the control instruction for instructing 
the control operation of the MIL based on malfunction information 
of the diagnosis target needs to be constructed in view of a type 
of the diagnosis target. Thus, the logic for executing the 



adjustment (II) of the result of each malfunction judgment is 
implemented by the two objects, namely, the object that specifies 
the control instruction for instructing the control operation of 
the at least one MIL and the object that carries out adjustment 
based on the control instruction for instructing the control 
operation of the MIL and outputs the final MIL information. 

In this way, even if any diagnosis target is changed, it 
is only required to change the malfunction-information storing 
object, and there is no need to change the 
malfunction-information managing object. Thus, the reusability 
of the self -diagnosis program is improved, so that the 
disadvantage discussed in the above section ( 1 ) can be dissolved. 

In Japanese Patent Application No. 2000-130180, the 
applicant of the present application has proposed to construct 
the program for executing the malfunction judgment (I) of the 
diagnosis target. The program includes one object that stores 
malfunction information and another object that commands the one 
object to store the malfunction information based on a result of 
a malfunction detection operation of a diagnosis target. Thus, 
an arrangement similar to one discussed in claim 2 can be applied 
to this program. That is, a malfunction-information storing 
object stores malfunction information of the diagnosis target 
determined based on the result of the malfunction detection 
operation of the diagnosis target in view of a level of 
malfunction of the diagnosis target, and a 
malfunction-information managing object commands the 
malfunction-information storing object to store the malfunction 



information based on the result of the malfunction detection 
operation of the diagnosis target. In this case, it will be 
understood that an advantages similar to one discussed above can 
be achieved. 

5 Furthermore, the malfunction information is generally 

judged for each diagnosis target or for each malfunction check 
item corresponding to the diagnosis target. Based on this, it 
is possible that the malfunction-information storing object is 
prepared for the respective diagnosis target or is prepared for 

10 the respective malfunction check item that corresponds to the 

diagnosis target, as disclosed in claim 3. In this way, even if 
any diagnosis target is changed, it is only required to 
change/modify the malfunction-information storing object 
corresponding to the diagnosis target, and the reusability of the 

15 self -diagnosis program is improved. 

The malfunction-information storing object can store 
relationship information indicative of relationship between the 
malfunction information and the control instruction, as 
disclosed in claim 4. That is, it is possible to store 

20 relationship information indicative of the relationship between 

the malfunction information, such as "normal", "temporarily 
abnormal" or "abnormal", and the control instruction, such as 
"flashing", "lighting-on" or " lighting-of f " . This arrangement 
is possible since such relationship does not change in the middle 

25 of the control operation. 

Furthermore, as disclosed in claim 5, the 
malfunction-information storing object may specify the control 
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instruction based on the malfunction information when a request 
for retrieving the control instruction is received from the 
malfunction-information managing object. This is based on the 
following fact. That is, it is sufficient that the control 
instruction is specified at the timing of the adjustment/output 
conducted by the malfunction-information managing object. 

The malfunction-information managing object adjusts the 
control instruction. Specifically, as disclosed in claim 6, the 
control instruction is selected from a plurality of control 
instructions having different predetermined priority levels, and 
the malfunction-information managing object outputs one of the 
control instructions having a highest priority level as the MIL 
information. For example, it is assumed that five 

malfunction-information storing objects are provided for five 
malfunction check items that correspond to the five diagnosis 
targets, respectively. It is also assumed that five control 
instructions specified by the five malfunction- information 
storing objects are "lighting-of f " , "lighting-of f " , 
"lighting-on", "lighting-of f" and "flashing", respectively, and 
a priority level decreases in the following order: "flashing", 
"lighting-on" and n lighting-of f " . In this case, "flashing" will 
be outputted as the MIL information. 

Furthermore, to achieve the objective of the present 
invention, a self -diagnosis program for implementing a 
self-diagnosis function of a vehicular control device according 
to claim 7 also has an object-oriented design and is constructed 
of a plurality of reusable objects. 



The reusable objects disclosed in claim 7 include a 
malfunction-information managing object that outputs MIL 
information for controlling the MIL when a request for 
controlling the MIL is received. The request for controlling the 
MIL is different from a request for executing the malfunction 
detection operation of the diagnosis target. 

Previously, (I) the malfunction judgment of the diagnosis 
target, (II) the adjustment of the result of each malfunction 
judgment and (III) the MIL control operation that is carried out 
based on the adjusted result are sequentially conducted upon 
receiving a corresponding command from the scheduler. During 
this operation, since the timing for executing the malfunction 
judgment (I) of the diagnosis target does not coincide with the 
timing for executing the MIL control operation (III) , the timing 
for executing the MIL control operation (III) needs to be adjusted 
in view of the timing for executing the malfunction judgment (I) 
of the diagnosis target. 

On the other hand, the malfunction -information managing 
object disclosed in claim 7 outputs the MIL information when the 
request for controlling the MIL is received. That is, the 
malfunction judgment is separated from the MIL control operation. 
Thus, the MIL control operation can be conducted regardless of 
the timing for executing the malfunction judgment of the 
diagnosis target. Thus, even if the diagnosis target is changed, 
and thereby the timing for executing the malfunction judgment of 
the diagnosis target is changed, the malfunction-information 
managing object that outputs the MIL information needs not be 



changed. In this way, the reusability of the self -diagnosis 
program is improved, and the disadvantage discussed in the above 
section (2) can be dissolved. 

In this case too, as disclosed in claim 8, the at least one 
malfunction-information storing object may store malfunction 
information of the diagnosis target, and the 
malfunction-information managing object may command the 
malfunction-information storing object to store the malfunction 
information of the diagnosis target. It is possible to adapt the 
arrangement of claim 8 in this arrangement. Furthermore, as 
disclosed in claim 9, such an arrangement can be adapted in the 
malfunction-information managing object according to any one of 
claims 1 to 6. 

Furthermore, to achieve the objective of the present 
invention, a self-diagnosis program for implementing a 
self-diagnosis function of a vehicular control device according 
to claim 10 also has an object-oriented design and is constructed 
of a plurality of reusable objects. 

Here, the reusable objects include a 

malfunction-information managing object that outputs MIL 
information for controlling the MIL and an MIL controlling object 
that controls the MIL based on the MIL information outputted from 
the malfunction-information managing object. 

In the MIL controller module disclosed in the above 
publication, the single program carries out both (II) the 
adjustment of the result of each malfunction judgment and (III) 
the MIL control operation. Thus, when one of the logics is changed, 



the MIL controller module cannot be reused. 

Contrary to this, in the present invention, the 
malfunction-information managing object that outputs the MIL 
information and the MIL controlling object that controls the MIL 
are separately provided, so that the adjustment of the result of 
the judgment and the control operation of the MIL are carried out 
by the separate objects . In this way, even if any diagnosis target 
is changed, there is a high possibility for reusing the MIL 
control object. On the other hand, when only the logic for 
executing the MIL control operation needs to be changed, the 
malfunction-information managing object can be reused without 
modifying it. As a result, the reusability of the self -diagnosis 
program is improved, and the disadvantage discussed in the above 
section (3) can be dissolved. 

In this case too, as disclosed in claim 11, the 
malfunction-information storing object stores malfunction 
information of the diagnosis target, and the 
malfunction-information managing object commands the 
malfunction-information storing object to store the malfunction 
information of the diagnosis target. Furthermore, the objects 
may further include an MIL controlling object that controls the 
MIL. Also, as disclosed in claim 12, the arrangement of claim 
11 can be adapted in the arrangement disclosed in any one of claims 
1 to 9. 

The self -diagnosis program of the vehicular control device 
can be provided as the program that is executed by the computer 
system side. Such a program may be stored in a computer readable 



recording medium, such as a FD, an MO, a CD-ROM, a DVD, a hard 
disk or the like and can be loaded to the computer system to 
execute it therein. Furthermore, a ROM or a backup RAM can be 
used as the computer readable recording medium to store the 
5 program and can be provided in the computer system. 

[ Embodiments ] 

An embodiment of the present invention will be described 
with reference to the accompanying drawings . 

FIG. 1 is a diagram showing an entire structure of an engine 
10 control system. The engine control system includes an engine 11 

and an engine control unit 16 that controls the engine 11. The 
engine control unit 16 corresponds to "a vehicular control 
device" of the present invention. 

Intake air is supplied to the engine 11 from an air cleaner 
15 through an intake air pipeline 12. An air flow sensor 13 for 

measuring an intake air flow and an intake air temperature sensor 
14 for measuring an intake air temperature are provided in the 
intake air pipeline 12. Furthermore, a throttle valve 15 driven 
by an accelerator pedal is provided in the intake air pipeline 
20 12. 

The engine control unit 16 receives various signals 
indicative of a state of the engine 11. These signals include 
an intake air flow signal of the air flow sensor 13 indicative 
of an intake air flow, a throttle valve position signal of a 
25 throttle sensor 17 indicative of a throttle valve position of the 

throttle valve 15, an air-fuel ratio signal of an air-fuel ratio 
sensor 18 indicative of an oxygen concentration in exhaust gas, 
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a battery voltage signal of a battery 19, a water temperature 
signal of a water temperature sensor 20, a rotational angle signal 
of a distributor 21 that is driven by the engine 11 and a cylinder 
identification signal of the distributor 21. 

The engine control unit 16 controls an operation of the 
engine 11. Specifically, the engine control unit 16 computes a 
fuel injection amount of each cylinder of the engine 11 in 
consistent with the current state of the engine 11 based on the 
above signals and outputs a fuel injection signal to each injector 
22a, 22b, 22c, 22d provided to each corresponding cylinder. 
Furthermore, the engine control unit 16 outputs an ignition 
signal to an igniter 23. 

The engine control unit 16 also diagnoses various 
components of the vehicle based on sensor signals outputted from 
corresponding sensors. A test switch 2 4 is provided to the engine 
control unit 16. The test switch 24 is provided for setting a 
diagnosis mode for outputting a result of the diagnosis. A 
malfunction indicator light (MIL) 25 for indicating the result 
of the diagnosis is connected to the engine control unit 16. 

A switch 26 is an ignition switch that connects the battery 
19 to the engine control unit 16. A starter switch 2 8 is provided 
for controlling a starter motor 2 7 in a synchronous manner with 
respect to the ignition switch 26. 

Next, the engine control unit 16 will be described in 
greater detail. FIG. 2 is a block diagram showing a structure 
of the engine control unit 16 shown in FIG. 1. The engine control 
unit 16 includes a CPU 31 that constitutes a computer system. The 



CPU 31 receives data from both an analog input circuit 32 and a 
digital input circuit 33. Analog data from the analog input 
circuit 3 2 are converted to digital data through an A/D converter 
3 4 and are then supplied to the CPU 31. 
5 The analog input circuit 32 receives the sensor signal Us 

of the air flow sensor 13 , the sensor signal Thw of the water 
temperature sensor 20, the sensor signal Tha of the intake air 
temperature sensor 14 and the voltage +B of the battery 19. The 
digital input circuit 33 receives the cylinder identification 

10 signal Gl of the distributor 21, the rotational angle signal Ne 

of the distributor 21, a lean rich signal Ox of the air-fuel ratio 
sensor 18 indicative of the oxygen concentration, the sensor 
signal STO of the throttle sensor 17 indicative of the throttle 
valve position of the throttle valve 15, a start signal STA of 

15 a starter switch 28 and a signal T of the test switch 24 for setting 

the diagnosis mode. 

The A/D converter 34 also acts like a mutiplexer that 
sequentially selects and reads the sensor signals inputted to the 
analog input circuit 32 upon receiving corresponding commands 

20 from the CPU 31 and converts the sensor signals to the 

corresponding digital data. 

The power supply circuit 35 supplies the voltage +B of the 
battery 19 to the CPU 31 through the ignition switch 26. The power 
supply circuit 35 also provides a continuous backup power source 

25 Batt. 

Output data from the CPU 31 are supplied to output circuits 
36, 37, 3 8 and are then outputted from the output circuits 36, 
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37, 38 as output signals of the engine control unit 16. That is, 
the output circuit 36 outputs the ignition signal IGt to the 
igniter 23. The output circuit 37 outputs a signal W indicative 
of the result of the diagnosis to control the MIL 25. The output 
circuit 3 8 outputs an output signal Tq. The output signal Tq 
specifies the fuel injection amount corresponding to the 
operational state of the engine 11 and is outputted to each 
injector 22a-22d to vary the injection amount of each injector 
22a-22d. 

The CPU (engine control unit) 31 includes a memory 3 9 for 
storing a self-diagnosis program which will be described in 
greater detail below. The memory 39 includes a ROM and one of 
a standby RAM and a nonvolatile EEPROM. The standby RAM is 
supplied with the electric power to keep the data stored therein 
even when the ignition switch 2 6 is turned off. The 
self-diagnosis program is stored in the ROM. The standby RAM or 
the EEPROM stores the malfunction information that is provided 
when the self -diagnosis program is executed. 

A characteristic feature of the present embodiment is found 
in the self-diagnosis program stored in the ROM of the memory 39. 
Thus, the self-diagnosis program will now be described in greater 
detail. 

FIG. 3 is a schematic diagram showing an architecture of 
the self-diagnosis program. The self-diagnosis program includes 
a plurality of programs, each having an object-oriented design. 
As is well known in the art/ the object-oriented design is 
different from a previously proposed design in which a software 



is focused on a process (e.g., a process of fuel injection). In 
the object-oriented design, modeling is carried out using an 
object as a basic unit, and each process is described based on 
characteristics and behavior of the corresponding object. This 
basic unit is referred to as ''object". The program that has the 
object-oriented design is constructed using the objects as its 
minimum constituent units. During execution of the program, a 
series of processes are executed while messages transmitted 
between the objects are used to connect between the objects. Each 
object includes data (attribute) and a method (procedure) for 
processing the data. The method of one object is executed upon 
receiving the corresponding message from the other object. In 
this description, although each object conducts a corresponding 
action by itself (e.g., the object carries out ...), it will be 
understood that the action is actually carried out when the CPU 
31 executes the corresponding program. 

As shown in FIG. 3, the self -diagnosis program of the 
present embodiment includes at least a malfunction detecting 
object 100, a malfunction-information managing object 200, a 
malfunction- information storing object 300 and an MIL 
controlling object 400. In FIG. 3 as well as in the other drawings, 
each object is designated as "obj" for the sake of simplicity. 

The objects 100-4 00 are programs implemented on a platform 
(hereinafter, simply referred as "PF") 500 and are executed upon 
receiving an MIL malfunction detection request or an MIL state 
renewal request from the PF 5 00. 

When the malfunction detecting object 100 receives the 



malfunction detection request from the PF 500, the malfunction 
detecting object 100 detects a malfunction of a diagnosis target 
to be diagnosed by the self -diagnosis based on the information, 
such as information of each sensor inputted to the engine control 
5 unit 16. The malfunction detecting object 100 is provided for 

each malfunction detecting process. The PF 500 outputs the 
malfunction detection request at a predetermined timing that is 
determined depending on the diagnosis target. For example, the 
PF 500 may output the malfunction detection request to the 

10 corresponding malfunction detecting object 100 at predetermined 

time intervals, e.g. , at every 4 ms, 8 ms or 16 ms. Alternatively, 
the PF 500 may output the malfunction detection request to the 
corresponding malfunction detecting object 100 at predetermined 
crank angles (CA), e.g., at every 30 CA, 60 CA or 180 CA. 

15 The malfunction-information managing object 200 receives 

normal /abnormal notification from each malfunction detecting 
object 100. Then, the malfunction-information managing object 
200 sends a malfunction-information storing notification to the 
malfunction-information storing object 300. When the 

20 malfunction-information storing object 300 receives the 

malfunction-information storing notification, the 

malfunction-information storing object 300 stores the 
malfunction information. The malfunction- information storing 
object 300 is provided for each predetermined malfunction check 

25 item. As described above, the malfunction detection request 

transmitted from the PF 500 acts as a trigger for generating the 
malfunction information, such as "normal", "temporarily 
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abnormal" or "abnormal", and the malfunction information is 
stored for each malfunction check item corresponding to the 
diagnosis target. 

When the MIL controlling object 4 00 receives the MIL state 
renewal request from the PF 500, the MIL controlling object 400 
sends an MIL information request to the malfunction- information 
managing object 200. The PF 500 outputs the MIL state renewal 
request at a predetermined timing that is appropriate for 
controlling the MIL 25. 

When the malfunction-information managing object 200 
receives the MIL information request from the MIL controlling 
object 400, the malfunction-information managing object 200 
requests each malfunction-information storing object 300 to 
retrieve a stored control instruction for instructing a control 
operation of the MIL 25 (hereinafter, referred to as the control 
instruction of the MIL 25) corresponding to the stored 
malfunction information. Upon receiving the request, the 
malfunction-information storing object 3 00 outputs the control 
instruction of the MIL 25 corresponding to the stored malfunction 
information based on the stored malfunction information. Then, 
the malfunction-information managing object 200 outputs the MIL 
information for controlling the MIL 25 to the MIL controlling 
object 400 based on the control instruction received from each 
malfunction-information storing object 300. 

As a result, the MIL controlling object 400 outputs an MIL 
response to the PF 500 based on the MIL information from the 
malfunction- information managing object 2 00 and also based on 



vehicle information . 

That is, in the present embodiment, the MIL control 
operation is achieved by the process, which is triggered by the 
MIL state renewal request and is carried out separately from the 
5 process triggered by the malfunction detection request. 

Connections between the objects 200-400 in the MIL control 
operation will be described in greater detail with reference to 
a message sequence chart (hereinafter, referred to as "the MSC" ) . 

FIG. 4 is the MSC depicting procedure of the MIL control 
10 operation. 

First, the PF 500 outputs the MIL state renewal request to 
the MIL controlling object 400. Upon receiving the MIL renewal 
request from the PF 500, the MIL controlling object 400 carries 
out an MIL response process SI. In the MIL response process SI, 
15 the MIL information request is outputted to the 

malfunction-information managing object 2 00. 

Upon receiving the MIL information request, the 
malfunction-information managing object 200 carries out an MIL 
information output process S2 . In the MIL information output 
20 process S2, a control instruction retrieving request is outputted 

to each malfunction-information storing object 300. 

Upon receiving the control instruction retrieving request, 
each malfunction-information storing object 300 carries out a 
control instruction output process S3. In the control 
25 instruction output process S3, the corresponding control 

instruction is specified and is outputted based on the stored 
malfunction information. Thus, each malfunction-information 
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storing object 3 00 includes relationship information indicative 
of the relationship between the malfunction information and the 
corresponding control instruction. The control instructions 
mentioned above include three control instructions, namely, 
"flashing", " lighting-on" and M lighting-of f " of the MIL 25. 

In the MIL information output process S2 of the 
malfunction-information managing object 200, when the control 
instruction is outputted from all the malfunction-information 
storing objects 3 00, the MIL information is prepared and is 
outputted based on the control instruction outputted from all the 
malfunction-information storing objects 300. 

When the MIL information is outputted from the 
malfunction-information managing object 200, the MIL controlling 
object 400 sends the MIL response to the PF 500 based on the 
vehicle information. In this way, the state of the MIL 25 is 
actually renewed. 

Next, with reference to FIG. 5, a relationship between the 
malfunction information and the control instruction stored by the 
malfunction-information storing object 300 will be described. 

The malfunction-information storing object 3 00 is provided 
for each malfunction check item, as mentioned above. In the 
present embodiment, a malfunction-information name used for 
storing the malfunction information is provided for each 
malfunction check item in a one-to-one relationship. That is, 
the unique malfunction-information name is provided to each 
malfunction-information storing object 300. For example, with 
reference to FIG. 5, a malfunction-information storing object 310 



has the malfunction-information name of "AIR FLOW SHEET", and a 
malfunction-information storing object 320 has the 
malfunction-information name of "WATER TEMPERATURE SHEET". 
Similarly, a malfunction-information storing object 330 has the 
5 malfunction-information name of "INTAKE AIR TEMPERATURE SHEET", 

and a malfunction-information storing object 340 has the 
malfunction-information name of "THROTTLE HIGH ABNORMAL SHEET" . 
Furthermore, a malfunction-information storing object 350 has 
the malfunction-information name of "THROTTLE LOW ABNORMAL 

10 SHEET". These five malfunction-information storing objects 

310-350 are simply referred to as the A- type 
malfunction- information storing object 310, the B-type 
malfunction-information storing object 32 0, the C-type 
malfunction-information storing object 33 0, the D-type 

15 malfunction-information storing object 34 0 and the E-type 

malfunction-information storing object 350, respectively, for 
the sake of clarity. 

As shown in FIG. 5, each one of the A- type to E-type 
malfunction-information storing objects 310-350 stores the 

2 0 malfunction information as well as the relationship information 

indicative of the relationship between the malfunction 
information and the control instruction. The malfunction 
information is stored by the malfunction-information managing 
object 200 and indicates a current malfunction level. For example, 

25 the malfunction information of the A- type 

malfunction-information storing object 310 is stored as 
"temporarily abnormal", and the malfunction information of the 
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B-type malfunction-information storing object 320 is stored as 
"normal". Similarly, the malfunction information of the C-type 
malfunction-information storing object 330 is stored as 
"abnormal", and the malfunction information of the D-type 
malfunction-information storing object 340 is stored as "normal". 
Furthermore, the malfunction information of the E-type 
malfunction-information storing object 350 is stored as 
"temporarily abnormal". 

Types of malfunction information and the corresponding 
control operations are indicated in an upper row and in a lower 
row, respectively, in the relationship information. Thus, upon 
receiving the control instruction retrieving request from the 
malfunction-information managing object 2 00, the 
malfunction-information storing object 300 selects the 
corresponding control instruction based on the stored 
malfunction information and outputs it. 

Next, the MIL response process SI, the MIL information 
output process S2 and the control instruction output process S3 
that are carried out by the objects 200-400, respectively, will 
be described in greater detail for the purpose of promoting an 
understanding of the operations of the objects 200-400. 

First, the MIL response process SI will be described with 
reference to a flowchart shown in FIG. 6. This flowchart shows 
the MIL response process that is carried out by the MIL 
controlling object 400 when the MIL state renewal request is 
received from the PF 500. 

First, at step (hereinafter, "step" is simply referred to 



as "S") 100, the MIL controlling object 400 requests the MIL 
information to the malfunction-information managing object 200. 
In response to this request, the malfunction-information 
managing object 200 outputs the MIL information. When the MIL 
information is outputted, control moves to SI 10. 

At SI 10, the vehicle information is acquired. One example 
of the vehicle information is on/off information of the ignition 
key. 

Next, at S120, it is determined whether a light ing-on 
condition of the MIL 25 is satisfied based on the MIL information 
and the vehicle information. If it is determined that the 
lighting-on condition of the MIL 25 is satisfied (S120: YES), 
control moves to S130. At S130, a lighting-on instruction is 
outputted as the MIL response, and the MIL response process ends. 
On the other hand, if it is determined that the lighting-on 
condition of the MIL 25 is not satisfied (S120: NO) , control moves 
to S140. 

At S140, it is determined whether a flashing condition of 
the MIL 25 is satisfied based on the MIL information and the 
vehicle information. If it is determined that the flashing 
condition is satisfied (S140: YES), control moves to S150. At 
S150, a flashing instruction is outputted as the MIL response, 
and the MIL response process ends. On the other hand, if the 
flashing condition is not satisfied (S140: NO), control moves to 
S160. 

At SI 60, it is determined whether a lighting-off condition 
of the MIL 125 is satisfied based on the MIL information and the 



vehicle inf oramtion. If it is determined that the lighting-off 
condition is satisfied (S160: YES), control moves to S170. At 
S170, a lighting-off instruction is outputted as the MIL response, 
and the MIL response process ends. On the other hand, if it is 
determined that the lighting-off condition is not satisfied 
(S160: NO) , control skips S170, and the MIL response process ends* 

Next, the MIL information output process S2 will be 
described with reference to FIG. 7. 

FIG. 7 is a flowchart showing the MIL information output 
process S2 executed by the malfunction-information managing 
object 200. The MIL information output process S2 is executed 
when the MIL information request is received from the MIL 
controlling object 400. 

First, at S200, the malfunction-information managing 
object 200 requests each malfunction-information storing object 
300 to retrieve the corresponding control instruction. In 
response to this request, each malfunction-information storing 
object 300 outputs the control instruction. When the control 
instruction is outputted, control moves to S210. 

At S210, it is determined whether all the 
malfunction-information storing objects 300 have received the 
control instruction retrieving request. For example, if there 
are five malfunction-information storing objects 310-350 of 
A-type to E-type, as shown in FIG. 5, it is determined whether 
all the five malfunction-information storing objects 310-350 
have received the control instruction retrieving request. If it 
is determined that all the malfunction-information storing 



objects 300 have received the control instruction retrieving 
request (S210: YES ) , control moves to S220. On the other hand, 
if it is determined that there is any malfunction-information 
storing object 300 that has not received the control instruction 
5 retrieving request (S210: NO), control returns to S200 to repeat 

the same. 

At S22 0, the MIL information is determined. In this 
operation, the control instruction of a higher priority outputted 
from each malfunction-information storing object 300 is 
10 selectively determined as the MIL information. As mentioned 

above, in the present embodiment, the control instructions of the 
MIL 25 include three types of control instructions, namely, 
"flashing" , " light ing-on" and "lighting-of f H . Among these 
instructions, a priority level decreases in the following order: 
15 "flashing", "lighting-on" and "lighting-of f" . 

Then, at S23 0, the selectively determined MIL information 
is outputted to the MIL controlling object 4 00, and the MIL 
information output process ends. 

Next, the control instruction output process S3 will be 
20 described with reference to FIG. 8. 

FIG. 8 is a flowchart showing the control instruction 
output process S3 executed by each malfunction-information 
storing object 300. The control instruction output process S3 
is executed when the malfunction-information storing object 300 
25 receives the control instruction retrieving request from the 

malfunction-information managing object 200. 

First at step S3 00, the stored malfunction information is 
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retrieved. In this operation, for example, the A-type 
malfunction-information storing object 310 shown in FIG. 5 
retrieves "temporarily abnormal" as the malfunction information. 

Next, at S3 10, reference is made to the relationship 
information. Then, at S320, the control instruction 

corresponding to the malfunction information retrieved at S300 
is specified. For example, since the malfunction information of 
the A-type malfunction-information storing object 310 shown in 
FIG. 5 is "temporarily abnormal", the A-type 
malfunction-information storing object 310 specifies 
"lighting-of f " as the control instruction by referring to the 
relationship information . 

Thereafter, at S330, the control instruction specified at 
S32 0 is outputted to the malfunction-information managing object 
200. 

Advantages of the objects 200-400 arranged in the above 
manner will be described below. 

The present embodiment is based on the following fact. That 
is, the logic for specifying the control instruction of the MIL 
25 based on the malfunction information needs to be constructed 
in view of the type of the diagnosis target. To satisfy this 
requirement, the adjustment logic for adjusting the result of the 
malfunction-information determination operation is implemented 
by the two objects. That is, the malfunction-information storing 
object 300 specifies the control instruction for the malfunction 
information (FIG. 8) / and the malfunction-information managing 
object 200 adjusts the specified control instruction (S220 in FIG. 



7) and outputs the final MIL information (S230). As a result, 
even if any diagnosis target is changed, it is only required to 
change the corresponding malfunction-information storing object 
300, so that there is no need to change or modify the 
malfunction-information managing object 2 00. Thus, the 
reusability of the self-diagnosis program is improved, and the 
disadvantage discussed in the above section ( 1 ) can be dissolved. 

Furthermore, in the present embodiment, the 
malfunction-information storing object 300 is prepared for each 
malfunction check item that corresponds to the diagnosis target. 
Thus, even if any diagnosis target is changed, it is only required 
to change or add the corresponding malfunction-information 
storing object 3 00. This allows improvement in the reusability 
of the self-diagnosis program. 

Furthermore, the malfunction information indicative of 
"normal", "temporarily abnormal" or "abnormal" is stored for each 
malfunction check item, which corresponds to the diagnosis target, 
by the process that is triggered by the malfunction detection 
request outputted from the PF 5 00. Furthermore, the MIL control 
operation is carried out in the other process that is triggered 
by the MIL state renewal request. More specifically, the MIL 
controlling object 4 00 outputs the MIL information request when 
the MIL state renewal request acting as the trigger is received 
from the PF 500. In response to the MIL information request, the 
malfunction-information managing object 200 outputs the MIL 
information (FIG. 4). Thus, the MIL control operation can be 
carried out irrespective of the timing for the execution of the 



malfunction-information determination operation. As a result, 
even if the diagnosis target is changed, and thereby the timing 
for the execution of the malfunction-information determination 
operation is changed, there is no need to change or modify the 
malfunction-information managing object 2 00 that outputs the MIL 
information. Because of this reason, the reusability of the 
self -diagnosis program is improved, and the disadvantage 
discussed in the above section (2) can be dissolved. 

Furthermore, the adjustment of the result of the 
malfunction-information determination operation and the MIL 
control operation are carried out by the different objects, i.e. , 
by the malfunction-information managing object 200, which 
outputs the MIL information, and the MIL controlling object 400, 
which controls the MIL, respectively. Thus, even if the diagnosis 
target is changed, there is a higher possibility that the MIL 
controlling object 400 is reused. On the other hand, if only the 
logic for executing the MIL control operation needs to be changed, 
the malfunction-information managing object 2 00 can be reused 
without modifying it. As a result, the reusability of the 
self-diagnosis program is improved, and the disadvantage 
discussed in the above section (3) can be dissolved. 

Here, the malfunction-information managing object 200 of 
the present embodiment corresponds to "the 

malfunction-information managing object" of the present 
invention, and the malfunction-information storing object 3 00 
corresponds to "the malfunction-information storing object" of 
the present invention. Also, the MIL controlling object 4 00 



corresponds to "the MIL controlling object" of the present 
invention . 

The present invention is not limited to the above 
embodiment and can be modified to any form without departing from 
the scope of the present invention. 
[Brief Description of the Drawings] 
[FIG. 1] 

FIG. 1 is a schematic view of an engine control system 
according to an embodiment. 
[FIG. 2] 

FIG. 2 is a block diagram showing a structure of the engine 
control unit according to the embodiment. 
[FIG. 3] 

FIG. 3 is a schematic view showing a structure of a 
self -diagnosis program. 
[FIG. 4] 

FIG. 4 is a MSC showing a procedure of MIL control 
operation. 
[FIG. 5] 

FIG. 5 is a schematic view showing information stored by 
a malfunction-information storing object. 
[FIG. 6] 

FIG. 6 is a flowchart showing an MIL response process. 
[FIG. 7] 

FIG. 7 is a flowchart showing an MIL information output 
process. 
[FIG. 8] 



FIG. 8 is a flowchart showing a control instruction output 
process . 

[Description of the reference numerals] 
11: engine 
5 12: intake air pipeline 

13: air flow sensor 
14: intake air temperature sensor 
15: throttle valve 
16: engine control unit 
10 17: throttle sensor 

18: air-fuel ratio sensor 
19: battery 

20: water temperature sensor 

2 1 : distributor 
15 22a, 22b, 22c f 22d: injector 

23: igniter 

24: test switch 

25: warning light (MIL) 

26: ignition switch 
20 27: starter motor 

28: starter switch 

32: analog input circuit 

33: digital input circuit 

34: A/D converter 
25 35: power supply circuit 

36, 37, 38: output circuit 

39: memory 
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100: malfunction detecting object 

200: malfunction-information managing object 

300, 310, 320, 330, 340, 350: malfunction-information storing 
object 

5 400: MIL controlling object 
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[Name of the Document] ABSTRACT 

[Abstract ] 

[Objective] 

It is an objective of the present invention to improve 
reusability of a self-diagnosis program that implements an MIL 
control operation in a case of specification change, such as 
change of a diagnosis target. 
[Solution ] 

Each malfunction-information storing object 300 is 
prepared for each corresponding malfunction check item that is 
consistent with a corresponding diagnosis target. The 
malfunction-information storing object 3 00 specifies a control 
instruction for each corresponding malfunction information. A 
malfunction-information managing object 200 adjusts the 
specified control instruction and outputs final MIL information. 
In an operation that is conducted separately from an operation 
that is triggered by a malfunction detection request, an MIL 
controlling object 400 outputs an MIL information request upon 
receiving an MIL state renewal request from a PF 500. Upon 
receiving the MIL information request, the 

malfunction-information managing object 2 00 outputs the MIL 
information. Adjustment of a result of a malfunction 
determination operation and an MIL control operation are carried 
out separately by the malfunction-information managing object 
200 and the MIL controlling object 400, separately. 
[Selected Figure] FIG. 3 



